Our commitment to data protection under the General Data Protection Regulation
Last updated: August 2026
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. Although the United Kingdom has left the European Union, we continue to adhere to GDPR principles as part of the UK GDPR framework, which incorporates the regulation into domestic law.
This page outlines how orchard-glow complies with GDPR requirements and explains your rights under this regulation.
orchard-glow acts as the data controller for the personal information we collect from you. This means we determine the purposes and means of processing your personal data.
Our contact details are:
orchard-glow
14 Berkeley Square
Clifton, Bristol BS8 1HP
United Kingdom
Email: [email protected]
Under GDPR, we must have a valid lawful basis to process your personal data. We rely on the following bases:
GDPR provides the following rights for individuals:
You have the right to be informed about the collection and use of your personal data. We fulfil this obligation through our Privacy Policy and this GDPR page.
You have the right to request a copy of the personal information we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
You have the right to request correction of personal data that is inaccurate or incomplete. We will respond within one month.
Also known as the "right to be forgotten", you can request deletion of your personal data where there is no compelling reason for its continued processing. This right is not absolute and applies only in certain circumstances.
You have the right to request that we limit the way we use your personal data. This is an alternative to requesting erasure.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You also have the right to request that we transmit this data directly to another organisation.
You have the right to object to processing based on legitimate interests, direct marketing, and processing for research or statistical purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, please contact us using the details provided above. We will respond to all legitimate requests within one month. Occasionally, it may take us longer if your request is particularly complex or you have made a number of requests.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: www.ico.org.uk
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.